Most of these recommendations are pretty drastic. Not using keyservers and using --throw-keys for example - while the author's examples are valid, i fear that P

Most of these recommendations are pretty drastic. Not using keyservers and using --throw-keys for example - while the author's examples are valid, i fear that PGP needs more useability, not less, to strike a balance of "pretty good privacy". Too hard to use means it won't be used right or at all, thus actually does not enhance, but instead reduces security. I feel like that beyond this, improvements to the gpg cli, lib, et al. are necessary for it to be used securely.